Maximo Application Suite - Location Service for Esri Component vulnerabilities

4 known vulnerabilities in Maximo Application Suite - Location Service for Esri Component from IBM. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Maximo Application Suite - Location Service…: Improper Control of Generation of Code

  CVE-2026-18537Oct 12, 2026IBM

  IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template.

• 8.7 High severity

  Maximo Application Suite - Location Service…: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-18529Oct 12, 2026IBM

  IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value passed to a shell command in a Kubernetes operator task.

• 7.7 High severity

  Maximo Application Suite - Location Service…: Improper Access Control

  CVE-2026-18517Oct 12, 2026IBM

  IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended network egress due to a misconfigured Kubernetes NetworkPolicy.

• 7.2 High severity

  Maximo Application Suite - Location Service…: Improper Privilege Management

  CVE-2026-18513Oct 12, 2026IBM

  IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.